Uploaded image for project: 'Jira Software Data Center'
  1. Jira Software Data Center
  2. JSWSERVER-24795

Advanced Roadmap allow editing of read-only fields

    XMLWordPrintable

Details

    • 5
    • We collect Jira feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

    Description

      Hi support,

      I am using Advanced Roadmap and I have noticed a security problem.

      Advanced Roadmap overrides any controls that are set in JIRA. If you have a custom fields that are not editable in JIRA, with Advanced Roadmap is anyway possible!

      The security problem is that if you use a Security Level based on a user picker field, and this is editable by anyone with Advanced Roadmap it is possible to make visible issues that normally would not be visible on Jira or are proteced by some condition rules.

      Please, check and fix as soon as possible.

       

      BR
      Antonio

      Attachments

        Issue Links

          mentioned in

          Page Loading...

          Page Loading...

          Activity

            People

              Unassigned Unassigned
              1c077bceb6c9 Antonio Bosio
              Votes:
              48 Vote for this issue
              Watchers:
              24 Start watching this issue

              Dates

                Created:
                Updated: